8f03b29aa7892aeee0569b5b0104f290ecb33749bbf11eb406f8dbb069f21779.exe

BENIGN

Mal-ecule

Size 931.0 KB download

First seen 110 days ago

Analyzed 93 days ago

Objectives

anti-static/obfuscation/binary-metrics Binary has normal code entropy (>5.5)

anti-static/obfuscation/payload PE version resource text

command-and-control/dropper/staging Binary has high overall entropy

command-and-control/infrastructure Binary has 4 or fewer sections

communications/http/client HttpClient byte-array download

data/db LINQ query operations

data/encode Repeated 64-char uppercase hex blocks

data/serialize .NET XML serialization capability

crypto/symmetric/xor Detects loop/jump control transfer in assembly

data/encode/image Pixel operation symbols family A

communications/http/server Modification of HTTP context items

file PE with many SHA256-sized hex blobs

binary PE has RT_GROUP_ICON in resources list

binary/metrics Binary has 1000 or more strings

binary/section PE .reloc section presence

dylib::mscoree links mscoree (CorExeMain)

hardening NO_SEH (SafeSEH not used)

lang/compiler mscorlib reference

package Large binary with few DLL dependencies

binary/anomaly PE version info numeric fields present

20 of 41 traits shown

SHA-256	8f03b29aa7892aeee0569b5b0104f290ecb33749bbf11eb406f8dbb069f21779
Filename	8f03b29aa7892aeee0569b5b0104f290ecb33749bbf11eb406f8dbb069f21779.exe

Source	harvest

Not seeing what you expected? Let us know